JVN#28042424: Cybozu Office vulnerable to information disclosure

Cybozu Office contains an information disclosure vulnerability in the mail function.

Impact

When a specially crafted mail is opened, images files accessible by authenticated users may be obtained by a third-party.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Cybozu Office 10.3.0